Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Top config

Checked:
01.03.2023 14:40:23

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
veenendaal.nl	A	185.71.60.91 Houten/Utrecht/Netherlands (NL) - LeaseWeb Netherlands B.V. Hostname: veenendaalprod01.cobytes.io	yes	1	0
	AAAA	2a03:38a0:60:91::1 Tiel/Gelderland/Netherlands (NL) - LeaseWeb NL	yes
www.veenendaal.nl	A	185.71.60.91 Houten/Utrecht/Netherlands (NL) - LeaseWeb Netherlands B.V. Hostname: veenendaalprod01.cobytes.io	yes	1	0
	AAAA	2a03:38a0:60:91::1 Tiel/Gelderland/Netherlands (NL) - LeaseWeb NL	yes
*.veenendaal.nl	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 951, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 13.03.2023, 00:00:00 +, Signature-Inception: 20.02.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: nl
nl	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.03.2023, 05:00:00 +, Signature-Inception: 01.03.2023, 04:00:00 +, KeyTag 951, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 34112, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 50076, Flags 256


	Public Key with Algorithm 8, KeyTag 52584, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 15.03.2023, 06:05:41 +, Signature-Inception: 01.03.2023, 00:07:34 +, KeyTag 34112, Signer-Name: nl


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 34112 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest "PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: veenendaal.nl
veenendaal.nl	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 50462, DigestType 2 and Digest HJpHhosavOF/C3f92/6yFqFR0SjmeDSyXd1L8CLQ6tw=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 14.03.2023, 04:42:46 +, Signature-Inception: 28.02.2023, 05:07:33 +, KeyTag 52584, Signer-Name: nl


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 52584 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 2223, Flags 256


	Public Key with Algorithm 8, KeyTag 50462, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 50462, Signer-Name: veenendaal.nl


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 50462 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 50462, DigestType 2 and Digest "HJpHhosavOF/C3f92/6yFqFR0SjmeDSyXd1L8CLQ6tw=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	RRSIG Type 1 validates the A - Result: 185.71.60.91 Validated: RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	RRSIG Type 16 validates the TXT - Result: MS=ms27874771 MS=ms35548984 MS=ms46653065 apple-domain-verification=xaUqBegkksKczLMK XZo25VBjSSwWPFNZMbbn1U/TC1EtsAEbmv2/vnS2dUU= google-site-verification=FWz8nLLoOzAwx9-Ay0gI1r4xUNFOkVYDzNzMr-S-FHI PrY7WIa2bBhcQYCqg6SNHGEC9kd5iP5/O0cRYBNmd2qb4e5pSpyNTo+EDkxCQsnC32ZIKfYK+8qfwHYpVlGhXg== adobe-idp-site-verification=a13045876affcccc4f738b84f00d501bee669aadefeee6f6443c67e0790715ab v=spf1 include:spf.protection.outlook.com include:spf.topdesk.net include:_spf.zivver.com include:_spf.centricsmc.eu include:spf.eprov.nl a:malengo.exception.mx ip4:217.149.131.225/32 include:_spf.cobytes.email include:email.bergop.net ip4:34.249.196.78 ip4:34.251.157.56 ip4:34.252.27.239 ip4:35.157.154.159 ip4:35.157.187.101 ip4:194.53.117.43 -all Validated: RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	RRSIG Type 28 validates the AAAA - Result: 2A03:38A0:0060:0091:0000:0000:0000:0001 Validated: RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	RRSIG Type 257 validates the CAA - Result: 9\|issuewildcomodoca.com; sectigo.com Validated: RRSIG-Owner veenendaal.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "7mo3rpslhiht9tihdt27g2dcpfjaesn4" equal the hashed NSEC3-owner "7mo3rpslhiht9tihdt27g2dcpfjaesn4" and the hashed NextOwner "8fo8m89kkrg44veallf8563c7grbubgn". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 7mo3rpslhiht9tihdt27g2dcpfjaesn4.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.veenendaal.nl) sends a valid NSEC3 RR as result with the hashed owner name "d28itijriujga9e04178d3me01mnb0jn" (unhashed: _tcp.veenendaal.nl). So that's the Closest Encloser of the query name. Bitmap: No Bitmap? Validated: RRSIG-Owner d28itijriujga9e04178d3me01mnb0jn.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "osb47p3d1e0bgko8iii33ur6v05kbdh4" (unhashed: *._tcp.veenendaal.nl) with the owner "omorolh701arfrm6uvcsk8boet4hd6dq" and the NextOwner "pb4suj9tr877rvt113d89cq48g735f8g". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: A, RRSIG Validated: RRSIG-Owner omorolh701arfrm6uvcsk8boet4hd6dq.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query (_443._tcp.veenendaal.nl) sends a valid NSEC3 RR as result with the hashed query name "6k364f67quouvqss3gq6rncu6t9ot4t0" between the hashed NSEC3-owner "5q84nkgtp34o48sbj0vp27qt1217dc07" and the hashed NextOwner "6o2aiulf6bv860qc71sgh9ve4j2gacd7". So the zone confirmes the not-existence of that TLSA RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner 5q84nkgtp34o48sbj0vp27qt1217dc07.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.

Zone: www.veenendaal.nl
www.veenendaal.nl	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "thvh1q2i2msfopg6s31g5627b06euj4e" between the hashed NSEC3-owner "thvh1q2i2msfopg6s31g5627b06euj4e" and the hashed NextOwner "u7qgh81tbvp061j6b6btdep6hddstt15". So the parent zone confirmes the not-existence of a DS RR. Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner thvh1q2i2msfopg6s31g5627b06euj4e.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	RRSIG Type 1 validates the A - Result: 185.71.60.91 Validated: RRSIG-Owner www.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	RRSIG Type 28 validates the AAAA - Result: 2A03:38A0:0060:0091:0000:0000:0000:0001 Validated: RRSIG-Owner www.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "thvh1q2i2msfopg6s31g5627b06euj4e" equal the hashed NSEC3-owner "thvh1q2i2msfopg6s31g5627b06euj4e" and the hashed NextOwner "u7qgh81tbvp061j6b6btdep6hddstt15". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner thvh1q2i2msfopg6s31g5627b06euj4e.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NoData-Proof required and found.


	TXT-Query sends a valid NSEC3 RR as result with the hashed query name "thvh1q2i2msfopg6s31g5627b06euj4e" equal the hashed NSEC3-owner "thvh1q2i2msfopg6s31g5627b06euj4e" and the hashed NextOwner "u7qgh81tbvp061j6b6btdep6hddstt15". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner thvh1q2i2msfopg6s31g5627b06euj4e.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.www.veenendaal.nl) sends a valid NSEC3 RR as result with the hashed owner name "thvh1q2i2msfopg6s31g5627b06euj4e" (unhashed: www.veenendaal.nl). So that's the Closest Encloser of the query name. Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner thvh1q2i2msfopg6s31g5627b06euj4e.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "s42tnm4nq9ifo4imoshkmr15dsmv7mds" (unhashed: _tcp.www.veenendaal.nl) with the owner "rrllc7gkpcfjp0sppbkpjqfveeetif7l" and the NextOwner "sumjc88hv8s8t3gpa8v0jbqn9g1ct195". So that NSEC3 confirms the not-existence of the Next Closer Name. Bitmap: A, RRSIG Validated: RRSIG-Owner rrllc7gkpcfjp0sppbkpjqfveeetif7l.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "jiutmvnhbvls8fcnd8p9obf4jelnkdv7" (unhashed: *.www.veenendaal.nl) with the owner "jee6j1ngtaok205cc6688f6j878lcvro" and the NextOwner "k7fgquc3n5vpnfcdp3ah93dqcucsf8ha". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner jee6j1ngtaok205cc6688f6j878lcvro.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NXDomain-Proof required and found.


	CAA-Query sends a valid NSEC3 RR as result with the hashed query name "thvh1q2i2msfopg6s31g5627b06euj4e" equal the hashed NSEC3-owner "thvh1q2i2msfopg6s31g5627b06euj4e" and the hashed NextOwner "u7qgh81tbvp061j6b6btdep6hddstt15". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner thvh1q2i2msfopg6s31g5627b06euj4e.veenendaal.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 09.03.2023, 00:00:00 +, Signature-Inception: 16.02.2023, 00:00:00 +, KeyTag 2223, Signer-Name: veenendaal.nl


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.veenendaal.nl	• ns1.argewebhosting.eu / ns-master.argewebhosting.eu		•
veenendaal.nl	• ns1.argewebhosting.eu / ns-master.argewebhosting.eu	31.25.98.210 Amsterdam/North Holland/Netherlands (NL) - Cldin B.V	•
	•	2a05:1500:702:0:1c00:eff:fe00:ce Flushing/Zeeland/Netherlands (NL) - PCextreme B.V. - Haarlem	•
	• ns2.argewebhosting.com / ns2.argewebhosting.com	31.25.98.169 Amsterdam/North Holland/Netherlands (NL) - Cldin B.V	•
	•	2a05:1500:702:0:1c00:13ff:fe00:a5 Flushing/Zeeland/Netherlands (NL) - PCextreme B.V. - Haarlem	•
	• ns3.argewebhosting.nl / ns3.argewebhosting.nl	92.63.168.137 Middelburg/Zeeland/Netherlands (NL) - PCextreme	•
	•	2a05:1500:600:7:1c00:55ff:fe00:f1a Amsterdam/North Holland/Netherlands (NL) - PCEXTREME	•
nl	• ns1.dns.nl / eqx-fr2-ns01-107		•
	• ns3.dns.nl / tld-all-fam1@53024		•
	• ns4.dns.nl / FRA2		•

4. SOA-Entries

Domain:	nl
Zone-Name:	nl
Primary:	ns1.dns.nl
Mail:	hostmaster.domain-registry.nl
Serial:	2023030126
Refresh:	3600
Retry:	600
Expire:	2419200
TTL:	600
num Entries:	3

Domain:	veenendaal.nl
Zone-Name:	veenendaal.nl
Primary:	ns1.argewebhosting.eu
Mail:	hostmaster.argeweb.nl
Serial:	2023022100
Refresh:	10800
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	6

Domain:	www.veenendaal.nl
Zone-Name:	veenendaal.nl
Primary:	ns1.argewebhosting.eu
Mail:	hostmaster.argeweb.nl
Serial:	2023022100
Refresh:	10800
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	1

5. Screenshots

Startaddress: https://www.veenendaal.nl/, address used: https://www.veenendaal.nl/, Screenshot created 2023-03-01 14:44:59 +00:0

Mobil (412px x 732px)

631 milliseconds

Screenshot mobile - https://www.veenendaal.nl/

Mobil + Landscape (732px x 412px)

563 milliseconds

Screenshot mobile landscape - https://www.veenendaal.nl/

Screen (1280px x 1680px)

1002 milliseconds

Screenshot Desktop - https://www.veenendaal.nl/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	396	732
content Size	396	3944

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://veenendaal.nl/ 185.71.60.91	301	https://veenendaal.nl/ Html is minified: 109.46 %	0.063	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://veenendaal.nl/

• http://veenendaal.nl/ 2a03:38a0:60:91::1	301	https://veenendaal.nl/ Html is minified: 109.46 %	0.064	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://veenendaal.nl/

• http://www.veenendaal.nl/ 185.71.60.91	301	https://www.veenendaal.nl/ Html is minified: 109.46 %	0.060	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:08 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.veenendaal.nl/

• http://www.veenendaal.nl/ 2a03:38a0:60:91::1	301	https://www.veenendaal.nl/ Html is minified: 109.46 %	0.047	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:08 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.veenendaal.nl/

• https://veenendaal.nl/ 185.71.60.91	301	https://www.veenendaal.nl/ Html is minified: 109.46 %	2.983	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:08 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.veenendaal.nl/
Strict-Transport-Security: max-age=31536000

• https://veenendaal.nl/ 2a03:38a0:60:91::1	301	https://www.veenendaal.nl/ Html is minified: 109.46 %	2.640	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:12 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.veenendaal.nl/
Strict-Transport-Security: max-age=31536000

• https://www.veenendaal.nl/ 185.71.60.91 Inline-JavaScript (∑/total): 4/1854 Inline-CSS (∑/total): 0/0	200	Html is minified: 136.35 % Other inline scripts (∑/total): 4/1854	2.843	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Language: nl
Link: </typo3conf/ext/opengemeenten_readspeaker/Resources/Public/Js/OpenGemeentenReadspeaker.min.js?1675774506>; rel=preload; as=script, </typo3conf/ext/opengemeenten_search/Resources/Public/Js/OpenGemeentenSearch-PageHeader-Search.min.js?1675774507>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-AutoComplete.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_cefeaturecollapsible/Resources/Public/Js/OpenGemeentenCeFeatureCollapsible.js?1675774505>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/Vendor/Polyfills/scrollbehavior.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Base.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Focusable.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-FragmentScroll.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Media.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-PageHeader-Collapsible.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Viewport.min.js?1675774504>; rel=preload; as=script, </typo3temp/assets/compressed/merged-1f136c630d98c8e070df5f3fe6b7ac54.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-0733fa9ab8923ce43b361d785313b45b.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-84d93c122eefd27f8887f89bfcfafa24.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-ea2daed555832d9f5d12169441f600f7.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-a5cd41b417f2428f1162957867bfe539.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e8a571eeb501f0c3d0bbe142eaf55da7.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-3fd48fb943fa6b4fbb0ed5abc1410771.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-d1d8c287d11ac10aef365e4c8e585f03.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-bfa7dc701a264bdda96c39bbbfb1a9fc.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5a9e338e425584b1929397b9d3f98eb.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-9c990e659b7b9b8a38d9812b5db776ee.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-59dfb49a47ba59a59e900f8420897f32.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5f72115b1365de04ba948ee0714450a.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-f4c7afb563d8d37363b1e1245d4f0b6e.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-8f1b0ddaf4bef4d4dd102b5bdd11570f.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-96cc88a9431a5e5c27256249f2ea150e.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-a54a2e966796426a613e171d33dc7c14.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-140aebc8386bebfec695c2841f752bd3.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-8b30207d77aca186e14432d7677cbfde.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-27294a227b67ae7646a65c909456c977.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5fdd5ae6361e30d320ee52a15e2be69.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-c1f7c38ab86215aec6b6e4760293d9e1.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-c880f9f7cd32ad0a489fc6260fd9ac47.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-418262c0342ef4cad57343a8e8279d4d.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-aea211f83c357c8902338579133c8f20.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-595de22e9c3cbfc8b1f4ba1b94b2944a.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-0377c1ae00fdcb3523719dcd6f3c1362.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-54d6f9a3fee16a18d7665df649a14aa6.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-ac09969c2353c72c4c31dc83c7fab331.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-9d1aa03580e9db58729ead0230b09966.css?1675774605>; rel=preload; as=style
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: same-origin
Report-To: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
Content-Security-Policy: default-src 'self' ;report-to csp; report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f ; frame-ancestors 'self';script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://www.youtube.com/; style-src 'self' 'unsafe-inline' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com ; img-src 'self' data: https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://.readspeaker.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://i.ytimg.com/ ; font-src 'self' data: ; object-src 'self' ; media-src 'self' https://.readspeaker.com https://www.youtube.com/; frame-src 'self' https://ilost.co https://veenendaal.maps.arcgis.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://www.youtube.com/; connect-src 'self' https://.readspeaker.com/ https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://app.watermelon.co https://wm-backend-prod-dot-watermelonmessenger.appspot.com ; form-action 'self' https://id.opengemeenten.nl/ https://.readspeaker.com https://login.microsoftonline.com ;
Content-Encoding: gzip

• https://www.veenendaal.nl/ 2a03:38a0:60:91::1 Inline-JavaScript (∑/total): 4/1854 Inline-CSS (∑/total): 0/0	200	Html is minified: 136.43 % Other inline scripts (∑/total): 4/1854	2.703	A
Server: nginx
Date: Wed, 01 Mar 2023 13:41:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Language: nl
Link: </typo3conf/ext/opengemeenten_readspeaker/Resources/Public/Js/OpenGemeentenReadspeaker.min.js?1675774506>; rel=preload; as=script, </typo3conf/ext/opengemeenten_search/Resources/Public/Js/OpenGemeentenSearch-PageHeader-Search.min.js?1675774507>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-AutoComplete.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_cefeaturecollapsible/Resources/Public/Js/OpenGemeentenCeFeatureCollapsible.js?1675774505>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/Vendor/Polyfills/scrollbehavior.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Base.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Focusable.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-FragmentScroll.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Media.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-PageHeader-Collapsible.min.js?1675774504>; rel=preload; as=script, </typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Viewport.min.js?1675774504>; rel=preload; as=script, </typo3temp/assets/compressed/merged-1f136c630d98c8e070df5f3fe6b7ac54.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-0733fa9ab8923ce43b361d785313b45b.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-84d93c122eefd27f8887f89bfcfafa24.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-ea2daed555832d9f5d12169441f600f7.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-a5cd41b417f2428f1162957867bfe539.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e8a571eeb501f0c3d0bbe142eaf55da7.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-3fd48fb943fa6b4fbb0ed5abc1410771.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-d1d8c287d11ac10aef365e4c8e585f03.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-bfa7dc701a264bdda96c39bbbfb1a9fc.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5a9e338e425584b1929397b9d3f98eb.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-9c990e659b7b9b8a38d9812b5db776ee.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-59dfb49a47ba59a59e900f8420897f32.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5f72115b1365de04ba948ee0714450a.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-f4c7afb563d8d37363b1e1245d4f0b6e.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-8f1b0ddaf4bef4d4dd102b5bdd11570f.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-96cc88a9431a5e5c27256249f2ea150e.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-a54a2e966796426a613e171d33dc7c14.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-140aebc8386bebfec695c2841f752bd3.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-8b30207d77aca186e14432d7677cbfde.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-27294a227b67ae7646a65c909456c977.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-e5fdd5ae6361e30d320ee52a15e2be69.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-c1f7c38ab86215aec6b6e4760293d9e1.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-c880f9f7cd32ad0a489fc6260fd9ac47.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-418262c0342ef4cad57343a8e8279d4d.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-aea211f83c357c8902338579133c8f20.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-595de22e9c3cbfc8b1f4ba1b94b2944a.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-0377c1ae00fdcb3523719dcd6f3c1362.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-54d6f9a3fee16a18d7665df649a14aa6.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-ac09969c2353c72c4c31dc83c7fab331.css?1675774605>; rel=preload; as=style, </typo3temp/assets/compressed/merged-9d1aa03580e9db58729ead0230b09966.css?1675774605>; rel=preload; as=style
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: same-origin
Report-To: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
Content-Security-Policy: default-src 'self' ;report-to csp; report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f ; frame-ancestors 'self';script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://www.youtube.com/; style-src 'self' 'unsafe-inline' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com ; img-src 'self' data: https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://.readspeaker.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://i.ytimg.com/ ; font-src 'self' data: ; object-src 'self' ; media-src 'self' https://.readspeaker.com https://www.youtube.com/; frame-src 'self' https://ilost.co https://veenendaal.maps.arcgis.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://www.youtube.com/; connect-src 'self' https://.readspeaker.com/ https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://app.watermelon.co https://wm-backend-prod-dot-watermelonmessenger.appspot.com ; form-action 'self' https://id.opengemeenten.nl/ https://.readspeaker.com https://login.microsoftonline.com ;
Content-Encoding: gzip

• http://veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 185.71.60.91 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.047	A
Not Found
Visible Content: 404 Not Found nginx
Server: nginx
Date: Wed, 01 Mar 2023 13:41:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip

• http://veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a03:38a0:60:91::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.047	A
Not Found
Visible Content: 404 Not Found nginx
Server: nginx
Date: Wed, 01 Mar 2023 13:41:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip

• http://www.veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 185.71.60.91 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.047	A
Not Found
Visible Content: 404 Not Found nginx
Server: nginx
Date: Wed, 01 Mar 2023 13:41:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip

• http://www.veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a03:38a0:60:91::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.047	A
Not Found
Visible Content: 404 Not Found nginx
Server: nginx
Date: Wed, 01 Mar 2023 13:41:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip

• https://185.71.60.91/ 185.71.60.91 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 100.00 % Other inline scripts (∑/total): 0/0	2.064	N
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 56) Welcome to veenendaalprod01.cobytes.io, nothing here....
Server: nginx
Date: Wed, 01 Mar 2023 13:41:26 GMT
Content-Type: text/html
Last-Modified: Mon, 07 Nov 2022 15:27:53 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"636923f9-3f"
X-XSS-Protection: 1; mode=block;
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Encoding: gzip

• https://[2a03:38a0:0060:0091:0000:0000:0000:0001]/ 2a03:38a0:60:91::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 100.00 % Other inline scripts (∑/total): 0/0	1.860	N
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 56) Welcome to veenendaalprod01.cobytes.io, nothing here....
Server: nginx
Date: Wed, 01 Mar 2023 13:41:30 GMT
Content-Type: text/html
Last-Modified: Mon, 07 Nov 2022 15:27:53 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"636923f9-3f"
X-XSS-Protection: 1; mode=block;
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Encoding: gzip

7. Comments

	1. General Results, most used to calculate the result
A	name "veenendaal.nl" is domain, public suffix is ".nl", top-level-domain is ".nl", top-level-domain-type is "country-code", Country is Netherlands (the), tld-manager is "SIDN (Stichting Internet Domeinregistratie Nederland)", num .nl-domains preloaded: 4674 (complete: 216710)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: veenendaal.nl has 2 different ip addresses (authoritative).
A	Good: Minimal 2 ip addresses per domain name found: www.veenendaal.nl has 2 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: veenendaal.nl has 1 ipv4, 1 ipv6 addresses
A	Good: Ipv4 and Ipv6 addresses per domain name found: www.veenendaal.nl has 1 ipv4, 1 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: www is preferred
A	Good: No cookie sent via http.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (8 urls)
	http://veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 185.71.60.91			Url with incomplete Content-Type - header - missing charset
	http://veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a03:38a0:60:91::1			Url with incomplete Content-Type - header - missing charset
	http://www.veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 185.71.60.91			Url with incomplete Content-Type - header - missing charset
	http://www.veenendaal.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a03:38a0:60:91::1			Url with incomplete Content-Type - header - missing charset
	https://185.71.60.91/ 185.71.60.91			Url with incomplete Content-Type - header - missing charset
	https://[2a03:38a0:0060:0091:0000:0000:0000:0001]/ 2a03:38a0:60:91::1			Url with incomplete Content-Type - header - missing charset
A	http://veenendaal.nl/ 185.71.60.91	301	https://veenendaal.nl/	Correct redirect http - https with the same domain name
A	http://veenendaal.nl/ 2a03:38a0:60:91::1	301	https://veenendaal.nl/	Correct redirect http - https with the same domain name
A	http://www.veenendaal.nl/ 185.71.60.91	301	https://www.veenendaal.nl/	Correct redirect http - https with the same domain name
A	http://www.veenendaal.nl/ 2a03:38a0:60:91::1	301	https://www.veenendaal.nl/	Correct redirect http - https with the same domain name
N	https://185.71.60.91/ 185.71.60.91	200		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2a03:38a0:0060:0091:0000:0000:0000:0001]/ 2a03:38a0:60:91::1	200		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain veenendaal.nl, 2 ip addresses.
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.veenendaal.nl, 2 ip addresses.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain veenendaal.nl, 2 ip addresses.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.veenendaal.nl, 2 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.veenendaal.nl
	2. Header-Checks
A	www.veenendaal.nl 185.71.60.91	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'self' ;report-to csp; report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f ; frame-ancestors 'self';script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://www.youtube.com/; style-src 'self' 'unsafe-inline' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com ; img-src 'self' data: https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://.readspeaker.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://i.ytimg.com/ ; font-src 'self' data: ; object-src 'self' ; media-src 'self' https://.readspeaker.com https://www.youtube.com/; frame-src 'self' https://ilost.co https://veenendaal.maps.arcgis.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://www.youtube.com/; connect-src 'self' https://.readspeaker.com/ https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://app.watermelon.co https://wm-backend-prod-dot-watermelonmessenger.appspot.com ; form-action 'self' https://id.opengemeenten.nl/ https://.readspeaker.com https://login.microsoftonline.com ;
B				Info: Header-Element is deprecated. report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked. object-src
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'. object-src
A				Good: report-to label defined, report-to - header defined and the label is a member. csp
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: object-src only with 'none' or 'self' found, no scheme, no other urls. That blocks object / embed / applet - elements.
F				Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F				Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F				Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C				Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: object-src
A		report-to		Ok: Header without syntax errors found: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
A				Ok: Header without syntax errors found: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	www.veenendaal.nl 2a03:38a0:60:91::1	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'self' ;report-to csp; report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f ; frame-ancestors 'self';script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://www.youtube.com/; style-src 'self' 'unsafe-inline' https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com ; img-src 'self' data: https://ilost.co https://.google-analytics.com https://.googletagmanager.com https://.readspeaker.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://i.ytimg.com/ ; font-src 'self' data: ; object-src 'self' ; media-src 'self' https://.readspeaker.com https://www.youtube.com/; frame-src 'self' https://ilost.co https://veenendaal.maps.arcgis.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://.readspeaker.com https://www.youtube.com/; connect-src 'self' https://.readspeaker.com/ https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://app.watermelon.co https://wm-backend-prod-dot-watermelonmessenger.appspot.com ; form-action 'self' https://id.opengemeenten.nl/ https://.readspeaker.com https://login.microsoftonline.com ;
B				Info: Header-Element is deprecated. report-uri https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked. object-src
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'. object-src
A				Good: report-to label defined, report-to - header defined and the label is a member. csp
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: object-src only with 'none' or 'self' found, no scheme, no other urls. That blocks object / embed / applet - elements.
F				Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F				Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F				Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C				Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: object-src
A		report-to		Ok: Header without syntax errors found: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
A				Ok: Header without syntax errors found: {"group":"csp","max_age":3600,"endpoints":[{"url":"https://sentry.swarmprod01.simplyadmire.com/api/3/security/?sentry_key=f8d6982f7fed4098b7aec6fba598a87f"}]}
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
F	www.veenendaal.nl 185.71.60.91	Permissions-Policy		Critical: Missing Header:
F	www.veenendaal.nl 2a03:38a0:60:91::1	Permissions-Policy		Critical: Missing Header:
	3. DNS- and NameServer - Checks
A	Info:: 6 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
A	Info:: 6 Queries complete, 6 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.argewebhosting.eu (2a05:1500:702:0:1c00:eff:fe00:ce, 31.25.98.210), ns2.argewebhosting.com (2a05:1500:702:0:1c00:13ff:fe00:a5, 31.25.98.169), ns3.argewebhosting.nl (2a05:1500:600:7:1c00:55ff:fe00:f1a, 92.63.168.137)
A	Good (1 - 3.0):: An average of 2.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: ns1.argewebhosting.eu, ns2.argewebhosting.com, ns3.argewebhosting.nl, 3 Name Servers included in Delegation: ns1.argewebhosting.eu, ns2.argewebhosting.com, ns3.argewebhosting.nl, 3 Name Servers included in 1 Zone definitions: ns1.argewebhosting.eu, ns2.argewebhosting.com, ns3.argewebhosting.nl, 1 Name Servers listed in SOA.Primary: ns1.argewebhosting.eu.
A	Good: Only one SOA.Primary Name Server found.: ns1.argewebhosting.eu.
A	Good: SOA.Primary Name Server included in the delegation set.: ns1.argewebhosting.eu.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.argewebhosting.eu, ns2.argewebhosting.com, ns3.argewebhosting.nl
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 3 different Name Servers found
A	Good: All name servers have ipv4- and ipv6-addresses.: 3 different Name Servers found
A	Good: Name servers with different Top Level Domains / Public Suffix List entries found: 3 Name Servers, 3 Top Level Domains: nl, eu, com
A	Good: Name Servers with different domain names found.: 3 different Domains found
	Warning: All Name Servers from the same Country / IP location.: 3 Name Servers, 1 Countries: NL
A	Info: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 31., 92., 2 different subnets (first two Bytes): 31.25., 92.63., 2 different subnets (first three Bytes): 31.25.98., 92.63.168.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 3 Name Servers with IPv6, 1 different subnets (first block): 2a05:, 1 different subnets (first two blocks): 2a05:1500:, 2 different subnets (first three blocks): 2a05:1500:0600:, 2a05:1500:0702:, 2 different subnets (first four blocks): 2a05:1500:0600:0007:, 2a05:1500:0702:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 6 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: comodoca.com is allowed to create wildcard-certificates
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
	https://www.veenendaal.nl/ 185.71.60.91	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://www.veenendaal.nl/ 2a03:38a0:60:91::1	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://www.veenendaal.nl/ 185.71.60.91	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://www.veenendaal.nl/ 2a03:38a0:60:91::1	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: All script Elements (type text/javascript) and src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 82 external CSS / JavaScript files found
A	Good: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 2 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
A	Good: All CSS / JavaScript files are sent with a long Cache-Control header (minimum 7 days). So the browser can re-use these files, no download is required. 82 external CSS / JavaScript files with long Cache-Control max-age found
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 10 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 10 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: Some img-elements have a valid alt-attribute.: 10 img-elements found, 6 img-elements with correct alt-attributes (defined, not an empty value).
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 4 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 286546 milliseconds, 286.546 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

veenendaal.nl

185.71.60.91

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

veenendaal.nl

185.71.60.91

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.veenendaal.nl
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

veenendaal.nl

2a03:38a0:60:91::1

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

veenendaal.nl

2a03:38a0:60:91::1

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.veenendaal.nl
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

www.veenendaal.nl

185.71.60.91

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

www.veenendaal.nl

185.71.60.91

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.veenendaal.nl
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

www.veenendaal.nl

2a03:38a0:60:91::1

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

www.veenendaal.nl

2a03:38a0:60:91::1

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.veenendaal.nl
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

185.71.60.91

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

not supported

185.71.60.91

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.cobytes.io
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

[2a03:38a0:0060:0091:0000:0000:0000:0001]

2a03:38a0:60:91::1

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

not supported

[2a03:38a0:0060:0091:0000:0000:0000:0001]

2a03:38a0:60:91::1

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.cobytes.io
	2	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

9. Certificates

CN=*.veenendaal.nl

11.05.2022

06.06.2023
1133 days expired

*.veenendaal.nl, veenendaal.nl - 2 entries

CN=*.veenendaal.nl

11.05.2022

06.06.2023
1133 days expired

*.veenendaal.nl, veenendaal.nl - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00CD55C917589A25D7196AAD8F7A36DE7F
Thumbprint:	E274453211DA63F1F199FDF0CE8FBCF5898DB210
SHA256 / Certificate:	J4jI1wTpp268JKLeLAeiW0NNSkAp3NoXlh7tAG6vH60=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	3bf01c849bea3c121e1f9e6035439e4fb78295b6adfb687a61c4e0f9eb895a5e
SHA256 hex / Subject Public Key Information (SPKI):	3bf01c849bea3c121e1f9e6035439e4fb78295b6adfb687a61c4e0f9eb895a5e (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=*.veenendaal.nl

11.05.2022

06.06.2023
1133 days expired

*.veenendaal.nl, veenendaal.nl - 2 entries

CN=*.veenendaal.nl

11.05.2022

06.06.2023
1133 days expired

*.veenendaal.nl, veenendaal.nl - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00CD55C917589A25D7196AAD8F7A36DE7F
Thumbprint:	E274453211DA63F1F199FDF0CE8FBCF5898DB210
SHA256 / Certificate:	J4jI1wTpp268JKLeLAeiW0NNSkAp3NoXlh7tAG6vH60=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	3bf01c849bea3c121e1f9e6035439e4fb78295b6adfb687a61c4e0f9eb895a5e
SHA256 hex / Subject Public Key Information (SPKI):	3bf01c849bea3c121e1f9e6035439e4fb78295b6adfb687a61c4e0f9eb895a5e (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:	33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:	f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:	33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:	f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:	2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:	55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):	e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	3972443AF922B751D7D36C10DD313595
Thumbprint:	D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:	aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.comodoca.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	01
Thumbprint:	D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:	16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=*.cobytes.io

28.04.2022

25.04.2023
1175 days expired

*.cobytes.io, cobytes.io - 2 entries

CN=*.cobytes.io

28.04.2022

25.04.2023
1175 days expired

*.cobytes.io, cobytes.io - 2 entries

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	669BDBE6358A60C9FF0D8F2FB27D801E
Thumbprint:	5CE4F0D4C27861543676412E9FCC72B033787C0C
SHA256 / Certificate:	NblnWelhtz1xxEyfcNBBMV4B1RYo+r+jeLWu/HFkp6s=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	ddc9cb88502e5580cb59c420dd650c81b8964d451c51ac3ef2a1630e422dda69
SHA256 hex / Subject Public Key Information (SPKI):	ddc9cb88502e5580cb59c420dd650c81b8964d451c51ac3ef2a1630e422dda69 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=*.cobytes.io

28.04.2022

25.04.2023
1175 days expired

*.cobytes.io, cobytes.io - 2 entries

CN=*.cobytes.io

28.04.2022

25.04.2023
1175 days expired

*.cobytes.io, cobytes.io - 2 entries

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	669BDBE6358A60C9FF0D8F2FB27D801E
Thumbprint:	5CE4F0D4C27861543676412E9FCC72B033787C0C
SHA256 / Certificate:	NblnWelhtz1xxEyfcNBBMV4B1RYo+r+jeLWu/HFkp6s=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	ddc9cb88502e5580cb59c420dd650c81b8964d451c51ac3ef2a1630e422dda69
SHA256 hex / Subject Public Key Information (SPKI):	ddc9cb88502e5580cb59c420dd650c81b8964d451c51ac3ef2a1630e422dda69 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:	33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:	f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:	33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:	f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):	e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:	2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:	55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):	e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	3972443AF922B751D7D36C10DD313595
Thumbprint:	D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:	aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.comodoca.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	01
Thumbprint:	D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:	16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester				0	0	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
3715868563 leaf cert	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester	2022-05-11 00:00:00	2023-06-05 23:59:59	*.veenendaal.nl, veenendaal.nl - 2 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://www.veenendaal.nl/ 185.71.60.91	a		67		0			0	0	0
	form		1		0	1	0	0	0	0
	iframe		1		0			0	0	0
	link	stylesheet	30		0	30	0	0	0	0
	link	other	15	93,435 Bytes	0	6	0	0	0	0
	meta	twitter	3		0			0	0	0
	meta	og	8	1,866,613 Bytes	0	1	0	0	0	0
	meta	other	17	412,481 Bytes	0	5	0	0	0	0
	picture		5		0			0	0	0
	script		11		0	11	0	0	0	0
https://www.veenendaal.nl/ 2a03:38a0:60:91::1	a		67		0			0	0	0
	form		1		0	1	0	0	0	0
	iframe		1		0			0	0	0
	link	stylesheet	30		0	30	0	0	0	0
	link	other	15	93,435 Bytes	0	6	0	0	0	0
	meta	og	8	1,866,613 Bytes	0	1	0	0	0	0
	meta	twitter	3		0			0	0	0
	meta	other	17	412,481 Bytes	0	5	0	0	0	0
	picture		5		0			0	0	0
	script		11		0	11	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://www.veenendaal.nl/
185.71.60.91

#main

#page-footer

#page-header__menu

#page-header__search__input

/aanvragen-en-regelen

/aanvragen-en-regelen/gebruik-achternaam-veranderen

/aanvragen-en-regelen/onze-trouwambtenaren-bekijken

/aanvragen-en-regelen/paspoort-of-identiteitskaart-verlengen

/aanvragen-en-regelen/praktische-zaken-bij-volledige-trouwceremonie-in-het-gemeentehuis

/aanvragen-en-regelen/rijbewijs-aanvragen-en-ophalen

/aanvragen-en-regelen/trouwen-en-geregistreerd-partnerschap-regelen

/aanvragen-en-regelen/trouwlocatie-gemeentehuis-of-ergens-anders

/aanvragen-en-regelen/verhuizing-in-en-naar-veenendaal-doorgeven

/algemeen/over-toegankelijkheid-en-webarchief

/algemeen/sitemap

/belasting-en-vergunningen

/belasting-en-vergunningen/afvalstoffenheffing

/belasting-en-vergunningen/bestemmingsplannen

/belasting-en-vergunningen/bezoekersapp-voor-parkeren

/belasting-en-vergunningen/exploitatievergunning-voor-horeca

/belasting-en-vergunningen/omgevingsvergunning-aanvragen

/belasting-en-vergunningen/ontheffing-gebruik-openbare-weg

/belasting-en-vergunningen/parkeervergunning-centrum

/info-over-de-gemeente

/info-over-de-gemeente/bouwprojecten

/info-over-de-gemeente/contact-ondernemers

/info-over-de-gemeente/gemeenteraad

/info-over-de-gemeente/inkoop-en-aanbesteding

/info-over-de-gemeente/parkeergarages-en-terreinen

/info-over-de-gemeente/samenstelling-college/burgemeester-gert-jan-kats

/info-over-de-gemeente/samenstelling-college/wethouder-dylan-lochtenberg

/info-over-de-gemeente/samenstelling-college/wethouder-engbert-stroobosscher

/info-over-de-gemeente/samenstelling-college/wethouder-marco-verloop

/info-over-de-gemeente/samenstelling-college/wethouder-martijn-beek

/info-over-de-gemeente/samenwerken-in-ict-campus

/info-over-de-gemeente/service-en-contact

/info-over-de-gemeente/vacatures

/info-over-de-gemeente/verkiezingen-provinciale-staten-en-waterschappen-2023

/info-over-de-gemeente/werkzaamheden-in-veenendaal

/info-over-de-gemeente/winkelstad-veenendaal

/ondersteuning-zorg-en-inkomen

/ondersteuning-zorg-en-inkomen/energietoeslag

/ondersteuning-zorg-en-inkomen/gehandicaptenparkeerkaart

/ondersteuning-zorg-en-inkomen/gehandicaptenparkeerplaats

/ondersteuning-zorg-en-inkomen/uitbetaaldagen-uitkering

/ondersteuning-zorg-en-inkomen/uitkering-aanvragen

/ondersteuning-zorg-en-inkomen/uitkeringen-zelfstandigen

/ondersteuning-zorg-en-inkomen/verblijf-buitenland-melden

/ondersteuning-zorg-en-inkomen/verplichtingen-bij-een-uitkering

/praat-en-doe-mee

/praat-en-doe-mee/meldingen-en-vragen

https://app-eu.readspeaker.com/cgi-bin/rsent?customerid=12916&lang=nl_nl&readid=content&url=https://www.veenendaal.nl/

https://boveenendaal.nl/

https://duurzaamveenendaal.nl/default.aspx

https://sociaalstartpuntveenendaal.nl/is/een-vraag-over-2/werk-geld-en-uitkering/geldzaken

https://twitter.com/gemveenendaal

https://veenendaal.raadsinformatie.nl/

https://veenendaal.raadsinformatie.nl/leden

https://www.acv-groep.nl/veenendaal/afvalbrengstation

https://www.facebook.com/gemeenteveenendaal

https://www.instagram.com/gemveenendaal

https://www.linkedin.com/company/gemeente-veenendaal

https://www.verbeterjewijk.nl/

form

get

/algemeen/zoeken

200

text/html; charset=utf-8
X-Content-Type-Options nosniff found

5956 Bytes

iframe

src

https://www.googletagmanager.com/ns.html?id=GTM-MT3XJ78

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-114x114.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-120x120.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-144x144.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-152x152.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-57x57.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-60x60.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-72x72.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-76x76.png

link

canonical

https://www.veenendaal.nl/

link

icon

/fileadmin/website_assets/Favicon/favicon-128.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 12614 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-16x16.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 657 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-196x196.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 34822 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-32x32.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 1520 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-96x96.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 9328 Bytes

link

shortcut icon

/fileadmin/website_assets/Favicon/favicon.ico

200

image/x-icon
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 34494 Bytes

link

stylesheet

/typo3temp/assets/compressed/merged-0377c1ae00fdcb3523719dcd6f3c1362.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

99 Bytes

local SRI possible, possible hash-values:

sha256-xlIqfUTRIvwQV1fOkJjKBQP5DlHL244L9IRCLcHAyRE=
sha384-lm5K/20DFpnQXgIOjyqanHvs3B9aDeoySfIGcDraYvdvm0W90S839RFGHnhtnExf
sha512-XJFxglYS0phy/YsNZHxgQXGLasnT9TrJRUldZhmhKHscfi8XjmFO3ldViW/yMUiAvjUUl6XOr4duStrmz1G6wQ==

link

stylesheet

/typo3temp/assets/compressed/merged-0733fa9ab8923ce43b361d785313b45b.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 499 Bytes

local SRI possible, possible hash-values:

sha256-Binxev1W0u2LPs4sVryfVecO1TazeTbOhX4eCDI+mdw=
sha384-feAqj/JttZZgvmrJQJk8qLXqjOBslwTy+QzTaZbdvwjAmnWFM1DSjHO73SXXlPYk
sha512-eTlfDzTW3XS9Hk2NaicFR1Dpk8FS4WCqTncWet8pblPJUA+xCDn38DurDiZdEh/c4GdUSzvybl2V4CJGi4vZZw==

link

stylesheet

/typo3temp/assets/compressed/merged-140aebc8386bebfec695c2841f752bd3.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 2605 Bytes

local SRI possible, possible hash-values:

sha256-MtvBPX/O/PHDICtR7/QiQdJxvUwOdPXy4IrBZ3fbEY4=
sha384-N+b4Jw+c9oOWNMp5IDHwSY7YOuGxZLY1Jyxts8QWly07Mjc+3uiDi/lLweJO31rY
sha512-E2Dibqdc3QKavaHU4sOjbgcbdIvQfw0lpYThR4W3k8NGtz4Ejeg60x52cnXn9i0HSC9soJtXOen6DoqOJXo+Cg==

link

stylesheet

/typo3temp/assets/compressed/merged-1f136c630d98c8e070df5f3fe6b7ac54.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1894 Bytes

local SRI possible, possible hash-values:

sha256-ptnpVVwLQhZ8kDOi2j5c7hpbjC4YCVVaI1e/qpWU1wc=
sha384-LL7aSBBNjFpsEFMFuQLiedmDln/1LH4jW1DGGmzUi2Gy9tJWBfHafU3Xt3YZSAW/
sha512-mZMiVIrE50ai5ovO/GNT+Bwpw5bHbMRhtXh9nyiRfbGHNSP3XxvC2WHljmIxD1HHncQgNCHio5YQcwGI1mGwzQ==

link

stylesheet

/typo3temp/assets/compressed/merged-27294a227b67ae7646a65c909456c977.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 987 Bytes

local SRI possible, possible hash-values:

sha256-OwSllhUab0foXm3bzpGRF/VJh+2qKSwmyd/FE6Fo/Cc=
sha384-XBA75pJGfL2d+6HUndJYCh9lOy95tDLDJYo+2JVxxWAKuxjc1PdMMdCVHt6c+Abk
sha512-YNCvBdpbpI556fBnMGXAYomigZfjxRqLV8SXLnS0rTic/3hKZMqu2dQ1WSbXPWHg76YEbM5HA/2WfF9z2pUzSQ==

link

stylesheet

/typo3temp/assets/compressed/merged-3fd48fb943fa6b4fbb0ed5abc1410771.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 469 Bytes

local SRI possible, possible hash-values:

sha256-6Y5ZsXoRC1hQiLPsCzzeur1Jgy/CK9/39vIvnZp27Lo=
sha384-iF00vQPxrnhhvo0DPtzSGSgxBcmbhm60wDw/FcLDLGcqmtMlG0qUBX93Lj+s3SBn
sha512-t1vMzCxap2lhon0qvxbHtSUR9pnbJD9ZfYg+GAhIS0l1eoGY8z3OY/byAW9hoqqthcRTc+td+xSdkf2dYRp6bQ==

link

stylesheet

/typo3temp/assets/compressed/merged-418262c0342ef4cad57343a8e8279d4d.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 409 Bytes

local SRI possible, possible hash-values:

sha256-+L7IWbLQ3PesILPvfsWY8FX3cKRomCbzxmcGm55pSzA=
sha384-VDvNUZQaMl7TDc9E8Ybr2kuLMm7HPVIlZ8ze/lneQutknJzLMubs9clUbACDEbpx
sha512-1JM6eYtBk3BDfu9bNMZjElbFK3Z+q9reO5jf7oOxfwiP6Wex5YJyeV8RbOKjsTAHpuXtiEqlEZubInqYST4YhA==

link

stylesheet

/typo3temp/assets/compressed/merged-54d6f9a3fee16a18d7665df649a14aa6.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

116 Bytes

local SRI possible, possible hash-values:

sha256-vjErYv6Is0mv03vciyL7RLd1F7ppLFD9WUU11aDpjfg=
sha384-76i0lS/8ZBTvfbXG+f7wT+EUzUA0Sj1uI/nx/h00Q2nslZtP4OaUvpd/3TAK/vVd
sha512-vSV7lUgQpdmIJYZTeg6BBrlb5gZEKYC0eWPE/ZEAlESQjRsE+fY2mjxfArAoETbJeOj6kUVNWb3r0gz52/h+rQ==

link

stylesheet

/typo3temp/assets/compressed/merged-595de22e9c3cbfc8b1f4ba1b94b2944a.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 758 Bytes

local SRI possible, possible hash-values:

sha256-HIwi3Vo6/wOfyCD4UP6lWJY91dr+CFU6Q3l85uhvhU0=
sha384-xtJXHCQYbzLZor9Q9ij3agp5dBpewtjeKkQxLTaOO0laf8VcXnEBHqcnZjSLyHzC
sha512-VOuXssTS5pXJ4fZdWeDMC3OBDW2ezo+UvWlE4KwxTad6rqJXqJ47EQYgZB8a7aYFxE0rKi1ifAKjRW54ToLlxw==

link

stylesheet

/typo3temp/assets/compressed/merged-59dfb49a47ba59a59e900f8420897f32.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

337 Bytes

local SRI possible, possible hash-values:

sha256-qyXG8qQlXsSOyS/n/I+0Xx2Mue/wbJNKD/5wIqJ74X8=
sha384-x0OSoBjaTYslVRWEDf4ose4pGDPwpfMvl9ieDI9ae5O0RMiY81k/vy96bbE6ju1f
sha512-bfL7VUaI5X2Tu8j7PRx6xPfBKiMfxIs2MTACYfoepWHaVIQ4V+Wh+sm67F0CXHoQpVxGdWgZ1jinM2IkeGEDwQ==

link

stylesheet

/typo3temp/assets/compressed/merged-84d93c122eefd27f8887f89bfcfafa24.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1910 Bytes

local SRI possible, possible hash-values:

sha256-15uNndio9f4R+0TM2sec1Uk5oIuUW3Z63xJZm1nYFxo=
sha384-5MFpo5n5oUTfztiva/wRj39K6pIRb0WrkfgzphBR4h4uDck2h76nY8/f6UomI2VD
sha512-PJ3CWQomibLTF4v7mFYZngFZOvvjYAxCpf4NZ6gfD2SSaYBV4P/Jc1sMroQFggNaV3ZjvCZBrHuGagAig5EOJw==

link

stylesheet

/typo3temp/assets/compressed/merged-8b30207d77aca186e14432d7677cbfde.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 3690 Bytes

local SRI possible, possible hash-values:

sha256-It4lK0DDx9NixrtgUPObLLKCZhEo+EfZ5zsrI1iGpbY=
sha384-jRuHNzqzlR7F3c2HNU7ZaIDUKeoaDY61sHi9tFeT5tzc0u6TbBNoeSIqbpCfmuRk
sha512-IkwkInZIe9zhDv2Nf8zQe3+1o7T4DREDNen3bwKtIktXSIzPucn54YldcMMPNImU5MRVtdvAlfXrYpIRY45ZWQ==

link

stylesheet

/typo3temp/assets/compressed/merged-8f1b0ddaf4bef4d4dd102b5bdd11570f.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 459 Bytes

local SRI possible, possible hash-values:

sha256-1qpf0yc16qYTzNHVk8IHXYGVfEi7+cLpaMwRh/IBZ04=
sha384-m/UOIj/M4bk2nH9VsaKDHPzWp15rJAGwOqznDQZfFIq0Kj/6RY6J1KYhXXqBtQ9a
sha512-JeQ/ehF63Yg8nJwD3bo4ze0Edw6O6eURjAK00Saba6vZlM6Jve1CW7ycIxRsiaGxIw3+aMm4z1hpKEcxpBg/CQ==

link

stylesheet

/typo3temp/assets/compressed/merged-96cc88a9431a5e5c27256249f2ea150e.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 402 Bytes

local SRI possible, possible hash-values:

sha256-i9jiBMx95RzkQ+bcvRDKrv1Sq52YGoDl2Nebx4as3Ns=
sha384-fFF4VO3hchN0VAlZAUSbb8daqm6B30H0L6S7UX4i4BLZkB7SW7u+mgugiCFdlQOF
sha512-LsJMTOiKXZaNNyjFTRo7jtgH/XNRj/Pkhqgdzx8S7ttcZXnE1eaEcbbLRpT2jvRudCGWxnh8yUwZ/bVJRieOeA==

link

stylesheet

/typo3temp/assets/compressed/merged-9c990e659b7b9b8a38d9812b5db776ee.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 828 Bytes

local SRI possible, possible hash-values:

sha256-/ySGtumT6yX16WNtYIin8aZkT5NiWNXuX/VwtK6x7vU=
sha384-Ra3TTmFA5j4yqvhUydmIlssDZkDkDDd4QuY2Pi7laQAFGn9vWto7au2PxKKTQ8qZ
sha512-Jt6kCwZJs47C90JDL59LIrNJtkuYKGsiou2Km/o+rdbrDBGq1zXbibN2cqhRfOmYf4LXblczTZ0QfiGU+gyd8Q==

link

stylesheet

/typo3temp/assets/compressed/merged-9d1aa03580e9db58729ead0230b09966.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 5657 Bytes

local SRI possible, possible hash-values:

sha256-hp9qhR/miOhj4YOpsPcVWbAGnJgw7yWfBNQAA96P96E=
sha384-LYjE3XfinqHAZ95XToNrk/cpNago/Sxt0OnHmip/pr+ipalc+F21dZ6fO0JJuaWp
sha512-mApPvaQvvu7EvqrHVIz9+PV30vFxpXTN+eFWEL9DUg6EkX9LSMuMGsxMOY8TfKX6M6t0mfTa+OXNmwjZvxESzg==

Content loaded via url("...")

data:image/png;base64,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	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='120' height='158' fill='%23e4e7e4'%3E%3Cpath fill-rule='evenodd' d='M48.4 74.3h45.4c0-27.8-8-53.2-22.8-74.3H0v158l48.4-83.7z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='120' height='158' fill='%23fff'%3E%3Cpath fill-rule='evenodd' d='M48.4 74.3h45.4c0-27.8-8-53.2-22.8-74.3H0v158l48.4-83.7z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='166' height='143' fill='%23f9af23'%3E%3Cpath fill-rule='evenodd' d='M0 0h166c0 60.7-30.1 112.6-83 143L0 0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23007bb0' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23666666' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23de3421' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23edefed' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23fff' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='220' height='400'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23edefed' d='M52.9 80h129.8c0 135.4-66.1 251.2-182.3 320h219.4V0H7l46 80z'/%3E%3Cpath fill='%23f9af23' d='M82.7 231.1H196a110 110 0 0 1-56.7 97.8L82.7 231z'/%3E%3Cpath fill='%23de3421' d='M21.6 60l30-16.7-30-17.7V60z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='184'%3E%3Cpath fill='%23fff' fill-rule='evenodd' d='M0 112l24 72H0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' fill='%23fff'%3E%3Cpath d='M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='32' height='33' fill='%23e03522'%3E%3Cpath d='M23.53 30.6L0 10.15 29.48 0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='32' height='33' fill='%23f9af23'%3E%3Cpath d='M23.53 30.6L0 10.15 29.48 0z'/%3E%3C/svg%3E	2

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='51' height='229' fill='%23007cba'%3E%3Cpath fill-rule='evenodd' d='M0 0h5c-.2 75.7 15.3 152 46 224v5H0V0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='63' height='197' fill='%23007cba'%3E%3Cpath fill-rule='evenodd' d='M0 0h30a576.2 576.2 0 0 0 33 192v5H0V0z'/%3E%3C/svg%3E	1

link

stylesheet

/typo3temp/assets/compressed/merged-a54a2e966796426a613e171d33dc7c14.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

365 Bytes

local SRI possible, possible hash-values:

sha256-95a32Fk0clI2P64Ln7PtMMvy2tUTpirxeLWB9KxpxxI=
sha384-2gl+ZNL3VWpC0mSS1eWfFSfUx+Ti3Rme6nOigKGNLFXNb9pMTfW7duhS+lcvCk3R
sha512-1aCOQQRdsdmG3U0FegwHqzH9R0HE2COLs7kfi8u9x7fr4VfD9pKWBYFiXy1GQId7OnZr+tFymh9Saqk5VgbSrQ==

link

stylesheet

/typo3temp/assets/compressed/merged-a5cd41b417f2428f1162957867bfe539.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 5314 Bytes

local SRI possible, possible hash-values:

sha256-dzs0wHtPp2jjlkJ8rgV/kiJrfUn5COxV/Ssbor3UQRY=
sha384-JUIJfD4aERzhb0iAMgB46A48NO13oLfEIDPebp3bK+zantyswADHws3RB14FNoJc
sha512-tiWAgskrbZa9K8pqhuvJ1TyLv18sjRZRibc2WFKjKQfEVTed6KSXCGTCN6HJFt8IBuIJMA5kqeataQf6Pw3OXQ==

link

stylesheet

/typo3temp/assets/compressed/merged-ac09969c2353c72c4c31dc83c7fab331.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

89 Bytes

local SRI possible, possible hash-values:

sha256-fK9iI6LS6AX87Xuh0QK56BOVViwI0UN/EjvwDLB6vjM=
sha384-Jqd67quXTgNMqwbgefKAhIXwlW11bgomb5QnjXRCuPRe/6FzjW2c9H28E+jc2hhv
sha512-L3h0FlZKP8TsKb0vIMP1RnwmL69dI3w5Zv8wTSw8m4DlZ/ofE9us6RKJoUxmjVDK8Vp3u7uDfUhNWfjSsuLuCA==

link

stylesheet

/typo3temp/assets/compressed/merged-aea211f83c357c8902338579133c8f20.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 544 Bytes

local SRI possible, possible hash-values:

sha256-vDARAATDbiiW6oUQd24QXv/F565O1GsyNKWufUtpRcs=
sha384-h5f92e5+4JY8EZ7L2syWcEZipvIoAH5DiS+lQpEEjCVTLzKnkd1cxJ/jjNRfDNJb
sha512-geQVhS7AhYZ3igLr0yjaosPoAAWxgn7BvtXLJwfFIexvUDnxKb8oI0ySpe1tPYX7gb+WGzOLGPhw/+dVtrN2Nw==

link

stylesheet

/typo3temp/assets/compressed/merged-bfa7dc701a264bdda96c39bbbfb1a9fc.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

269 Bytes

local SRI possible, possible hash-values:

sha256-fwp1S5BUOuyTcfYOtBDuAgdvnky3sooh3tHN+s4UXXI=
sha384-9+oGUzTU6JDjvwP4cirCApMV2/7QL+7Ke1/J0/Ji16luNf9jFmevcHxXTiUahWLT
sha512-BU6mjjg1fCvs5b5iHKr4UaGzG0X7vpSVuQlVYXDMKbNig++d3FDN9kXt9q/3CiSQCo1o43yR/+YfFG66l2Znkg==

link

stylesheet

/typo3temp/assets/compressed/merged-c1f7c38ab86215aec6b6e4760293d9e1.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 582 Bytes

local SRI possible, possible hash-values:

sha256-xIN6hQkjhhYUaBGqVVy8y15iljLcfMJK9QNuJqRI9/M=
sha384-B/s58BSck/veSQq5QYMqgliRZNDDmDwEgSQArnusIq7OzOtBmIN0hu1v4YayHOh6
sha512-yDqvNi2CTKsBGAi4W2blB6R1HOZA/AFz70zwj240Zf1t1I3CT4i0/RgFglfKEkOZ7I9uqKy4Q2XXNtr7wfH+yA==

link

stylesheet

/typo3temp/assets/compressed/merged-c880f9f7cd32ad0a489fc6260fd9ac47.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 2503 Bytes

local SRI possible, possible hash-values:

sha256-YLAxilFPOewpTAmWNuFMmQcSGoYduEfaO9nUmWTEmLc=
sha384-qhBxCmmjzbfDExMR+usn+ZA3JQhRUYkxcZgLVQGZzNxoPWrg/tT1uRxTdTKNf2Bq
sha512-saBA6E2mu5ht/om5B+cpQWU1l3gI2bvXkoIorKWWYE3V0SjHRgbnVd7CiM+zPSJWTkfTRek/fw7ue63daIbuRw==

link

stylesheet

/typo3temp/assets/compressed/merged-d1d8c287d11ac10aef365e4c8e585f03.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 401 Bytes

local SRI possible, possible hash-values:

sha256-t5R0Bme3kHiTQq+gn13LKNLdQj83uSdjsz+qmHbcIh4=
sha384-1zrk4csVKNuPSt4xuOBJZ/aerInYINPt9ijE8M5WaScRZpugbFmQw9QoCX6km8v0
sha512-z1zsVEtJZglTw3QeVBPH/3HnMFyC7WWtTS4/UF9fhg/MJJyImhcOsIvUhZO7vZ/HcUBKD3wHxH3xDnXgr8iAuA==

link

stylesheet

/typo3temp/assets/compressed/merged-e5a9e338e425584b1929397b9d3f98eb.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

283 Bytes

local SRI possible, possible hash-values:

sha256-fwBn2Lqj9VAo4eN+T3SaIMTWnL7UWwetCOeqpPON14o=
sha384-vdB6PKZAOMs5u+6ZLmFd7O16DyVC2zdTR4bc5k2hlUS/CLQtDBB2wzNCXsglvPlz
sha512-MQEpFz2ZUEkLgguU5NPo4NGvaTAwGBgJYKLrbM1XSOZs6xHlni1Yv0dXthsmrY4uNjahY91dLcY8They40h5dQ==

link

stylesheet

/typo3temp/assets/compressed/merged-e5f72115b1365de04ba948ee0714450a.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

211 Bytes

local SRI possible, possible hash-values:

sha256-zvIdQc0AMDLcO1CIU3MYtGKpTYKrhDEk/MdmGv6qKeo=
sha384-bV4jbHHdbYgR50A3mr0taT6WEY9tH0bnq4kNHKk7dp23/kAwdU29q5EWQM6rOeYK
sha512-ihoWPHFr3TtiZkJLLswr06WB1/cFNzLpfcKPgUJ+nUo8npBNF9IA3Koz0kDfeu+HaGfPQvNoYeuKCzN+ICAX1g==

link

stylesheet

/typo3temp/assets/compressed/merged-e5fdd5ae6361e30d320ee52a15e2be69.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 758 Bytes

local SRI possible, possible hash-values:

sha256-8ZK7WvzLbOAM5VCq9hb53Hk90dMI5L23UwfzyqA/jSQ=
sha384-BAII6fifZQmYvwC+t8dq6cQehXN1MIi8lXTNg6zG94QJMnhPNyExzl7M8yS7dUEf
sha512-7LJO2xaFjYblMElrEwPx42gRe43G0LLDNvJNJMXtS7lFgfx89opo23rwqKQqi2QdPkU/QnNmdBQ2KKvJccJoGA==

link

stylesheet

/typo3temp/assets/compressed/merged-e8a571eeb501f0c3d0bbe142eaf55da7.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1592 Bytes

local SRI possible, possible hash-values:

sha256-dtcwToPPw+VB4ACMurKMglJzh25RD3ZDlMVu4w2PKkE=
sha384-eZbXwUj07bZ6xGe7qTJzF/1/AjOHmebDX6ucE/QDZ6uGHIi5cJ5b+b7IS7gu6H2/
sha512-XkgvwPfNVm8uBIUEKEWvk/yrW6/MtiIY5uLN62X2XvarZ3AhrBnsoP7VPDcorbcnNMaqVrU+fMXclFfuN/U74g==

link

stylesheet

/typo3temp/assets/compressed/merged-ea2daed555832d9f5d12169441f600f7.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 311 Bytes

local SRI possible, possible hash-values:

sha256-8Kg5gx9rm/3p9UQYuv8KEhbIqSo08b3KnRhAJo9NH0Q=
sha384-gpTUPYGuCatesyQ8ZV8pHvmclFUesZS9pXdXhZu+B9H4qubbasW564HdZlwYFCis
sha512-xYURYPtPMYGwIqJACUcQx/ZLhnrQG6IJNDh9op3xksckVBkPlehNEPoymehvIZIkcNtYPiQnu6uIlFbKRb6TDA==

Content loaded via url("...")

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Bold.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Bold.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-BoldItalic.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-BoldItalic.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Italic.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Italic.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Roman.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/CenturySchoolbook/CenturySchoolbook-Roman.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-Bold.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-Bold.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-BoldItalic.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-BoldItalic.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-Book.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-Book.woff2

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-BookItalic.woff

../../../typo3conf/ext/veenendaal_site/Resources/Public/Fonts/Circular/Circular-BookItalic.woff2

link

stylesheet

/typo3temp/assets/compressed/merged-f4c7afb563d8d37363b1e1245d4f0b6e.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

200 Bytes

local SRI possible, possible hash-values:

sha256-FBJ73Fy9i+Ao5mJedelleEW3jaio6solabhh9hYL/MQ=
sha384-rnDe1Q7XtreE5Ye9ye7e9wu8ZYU8pzl81qQ9+tz6FN3xqhNtvDtovLasWJXGJ09/
sha512-8Q4SvTNVO8jJ1HThYGMLXromKThxKiFh2nx7rcallzgyA8OxbXR85D0RqPWiq9UDrxi6NI7EG7aH+VRZzlrOKw==

meta

charset

utf-8

meta

og:description

Veenendaal, een groeiende jonge leefstad, fietsstad, winkelstad en ICT-centrum van de regio.

meta

og:image

https://www.veenendaal.nl/fileadmin/_processed_/b/a/csm_plaatsvoorjou_55b892f279.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 1866613 Bytes

meta

og:image:alt

foto van Veenendaal

meta

og:image:height

837

meta

og:image:url

https://www.veenendaal.nl/fileadmin/_processed_/b/a/csm_plaatsvoorjou_55b892f279.png

meta

og:image:width

1600

meta

og:site_name

Gemeente Veenendaal

meta

og:title

Veenendaal maakt plaats voor jou

meta

x-ua-compatible

IE=edge

meta

application-name

Gemeente Veenendaal

meta

description

Online service en informatie van de gemeente Veenendaal. Wilt u langskomen? Maak eerst een afspraak op de website.

meta

format-detection

telephone=no

meta

generator

TYPO3 CMS

meta

keywords

gemeente, gemeentehuis, openingstijden, veenendaal

meta

msapplication-square150x150logo

/fileadmin/website_assets/Favicon/mstile-150x150.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 53956 Bytes

meta

msapplication-square310x310logo

/fileadmin/website_assets/Favicon/mstile-310x310.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 218464 Bytes

meta

msapplication-square70x70logo

/fileadmin/website_assets/Favicon/mstile-70x70.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 12614 Bytes

meta

msapplication-tilecolor

#007cba

meta

msapplication-TileImage

/fileadmin/website_assets/Favicon/mstile-144x144.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 20299 Bytes

meta

msapplication-wide310x150logo

/fileadmin/website_assets/Favicon/mstile-310x150.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 107148 Bytes

meta

robots

index,follow

meta

theme-color

#007cba

meta

twitter:card

summary

meta

twitter:description

Veenendaal, een groeiende jonge leefstad, fietsstad, winkelstad en ICT-centrum van de regio.

meta

twitter:title

Veenendaal maakt plaats voor jou

meta

viewport

width=device-width, initial-scale=1

meta

webreader-url

//cdn-eu.readspeaker.com/script/12916/webReader/webReader.js?pids=wr&notools=1

picture

• source

media: (min-width: 30rem)

srcset

/fileadmin/website_assets/veenendaal-logo.svg

200

image/svg+xml
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 2870 Bytes

• source

media: (max-width: 29.999rem)

srcset

/fileadmin/website_assets/veenendaal-logo-klein.svg

200

image/svg+xml
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 1139 Bytes

• img

/fileadmin/website_assets/veenendaal-logo.svg

200

alt: Logo Home

image/svg+xml
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 2870 Bytes

picture

• source

media: (min-width: 768px) and (max-width: 991px)

srcset

/fileadmin/_processed_/1/e/csm_fotostudio7--4467_3dd9e1f9cb.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 11399 Bytes

• source

media: (min-width: 480px) and (max-width: 767px)

srcset

/fileadmin/_processed_/1/e/csm_fotostudio7--4467_c2c4616870.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 21929 Bytes

• img

/fileadmin/_processed_/1/e/csm_fotostudio7--4467_3a84f04445.jpg

200

no alt-Attribute

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 29436 Bytes

picture

• source

media: (min-width: 992px)

srcset

/fileadmin/_processed_/d/b/csm_afkoppelen_4fc8ab2901.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 42596 Bytes

• source

media: (min-width: 480px) and (max-width: 767px)

srcset

/fileadmin/_processed_/d/b/csm_afkoppelen_ae1243e919.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 22844 Bytes

• img

/fileadmin/_processed_/d/b/csm_afkoppelen_4fc8ab2901.jpg

200

alt: regenton installeren

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 42596 Bytes

picture

• source

media: (min-width: 992px)

srcset

/fileadmin/_processed_/0/8/csm_header_verbeterjewijk_1baccd7a86.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 189589 Bytes

• source

media: (min-width: 480px) and (max-width: 767px)

srcset

/fileadmin/_processed_/0/8/csm_header_verbeterjewijk_d191d05e97.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 100066 Bytes

• img

/fileadmin/_processed_/0/8/csm_header_verbeterjewijk_1baccd7a86.png

200

no alt-Attribute

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 189589 Bytes

picture

• source

media: (min-width: 48rem) and (max-width: 61.999rem)

srcset

/fileadmin/_processed_/f/6/csm_dragonder_4beafd2e88.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 127425 Bytes

• source

media: (min-width: 62rem)

srcset

/fileadmin/_processed_/f/6/csm_dragonder_b51d6028f5.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 92519 Bytes

• source

media: (min-width: 30rem) and (max-width: 47.999rem)

srcset

/fileadmin/files/Veenendaal/afbeeldingen/Spotlights/dragonder.jpg

200

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 9858401 Bytes

• img

/fileadmin/_processed_/f/6/csm_dragonder_a9b55aa9ae.jpg

200

alt: Luchtfoto van wijk Dragonder

image/jpeg
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 54238 Bytes

script

src

/typo3conf/ext/opengemeenten_cefeaturecollapsible/Resources/Public/Js/OpenGemeentenCeFeatureCollapsible.js?1675774505

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 2859 Bytes

local SRI possible, possible hash-values:

sha256-k0bQflX6/bf5bMIF5WOlfVjeE0LGl2u8sVwetxmt0uw=
sha384-gOOhjTGLeh97q3mlbM0yf2gnRdVnQV8j+Dmz10yq1Wujufmi96jhUvgBesLUoik/
sha512-eY91ud2HXyqEgarh5hN6F4ZdGh1k6IOLVe00guyblAh29WvJIxquAvwl40YBso5pTs8dsu5rLHhgEkBbXbJC7g==

script

src

/typo3conf/ext/opengemeenten_readspeaker/Resources/Public/Js/OpenGemeentenReadspeaker.min.js?1675774506

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

463 Bytes

local SRI possible, possible hash-values:

sha256-UyDmGEyzScTBMbE2vfkIU90X5Lj2uA0q9ryCEz/yHr0=
sha384-+62CxF7A655p+3k62Uvum59cNunTnZvKGQ8TptLlSZG4N6mdpo6lqumQ4dl3mSRE
sha512-wunUuvGMmI4Fwxc8eHvc5jOlFFs1qIALCqQTspodXW8UpY2GOjrKWG0UxPhWuJWaiZeax4X91O0cr5c5qfXodg==

script

src

/typo3conf/ext/opengemeenten_search/Resources/Public/Js/OpenGemeentenSearch-PageHeader-Search.min.js?1675774507

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 488 Bytes

local SRI possible, possible hash-values:

sha256-acBFzdoZBqyL7Smz4ytRVEdl5xmV8Mp0NpjBjcLTkxA=
sha384-/Bi9mX6L36+zQeY3OWqDnXkBpx2FTp1ZDr0dwmOhZfnC21pT4QLIDcAyFp/xMmdA
sha512-13myYm7hgVw9TIVCGjGIDeNn44wRhmjv8vx7SgnmsKqF0mb2CE8EIC7Rs/rDAYGpeYrfl7ggThgNH3il3Fu2eA==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-AutoComplete.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1764 Bytes

local SRI possible, possible hash-values:

sha256-6Yjeb2rla5Y07ijc89Gs/yB56N8CCaazioJ01ikiFXk=
sha384-yXk2xLpsx1ZP1r+9hKYo2nuNbVVUt2L9ROqhpseWu2Vv+YFf1jMyNnnWQLjF570s
sha512-JANiitkPYQRtip0xFUP2pBKC1GHoX7Lxxu6ouLsyn2OqKMYs4xuuaOnN8A08jP4mfI1VCd51vt7usQ/8jAa56Q==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Base.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

284 Bytes

local SRI possible, possible hash-values:

sha256-ImMTUx6nHnt1plq6KKzwWe7F5ouZupwd5tI2/nMRNmQ=
sha384-Se6XM3s547ona77eOLO7fuDd5yrw483NWFRIZy3gZmHfcNMb3qxoiCQlRnoI00Jf
sha512-ABli2aHmDaedZPBnHvKzgpIH7bhpHTrfxFNWvrRxDEKE1ocnnaI6j2/WEYT5zerTQbc25gJvvx5lczpaHrxeDA==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Focusable.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

256 Bytes

local SRI possible, possible hash-values:

sha256-ig0IAUzNH+Pl972li4HvZt5c+3DAJP1Tt0S+2XVrpxg=
sha384-z3RI4aWF6dEjMI1pCPJhq8bxFCNws77Txkn1JbFQE/GuhqUi5vvb4NQmDonOiks3
sha512-KYvWSko2cJfxTZbYTWaHAOGd3L9lvzRpzpLfgdRNZ2y/Acewwx67ESwD+q0R/NFx+2R7OqnC4dZWuCiYUnSzKA==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-FragmentScroll.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 761 Bytes

local SRI possible, possible hash-values:

sha256-MoefybUHFlBsu6c790AaCfngafjszVh/T3uTLYh2GhU=
sha384-CPt6K8512PxtLYGy+cJLg9bUIRfjO1htXvdaee3476/0gkLQq8Zs2qdfyG34XaAC
sha512-KWl5NxFbXtsHMJlmbtM3yhZiYDFq5QnjOtfhXk2sbLjtV8u0zwuueEgtCT0J5v0OHs35f+wr9+TnIEa4z3iHRw==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Media.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1950 Bytes

local SRI possible, possible hash-values:

sha256-6bCXjFgZ1s0D6J6oysPMVljAz8ujghdvpdPB68dM31M=
sha384-ubR3ZkHMhTdi4VlV+2MlxZc37ZFRuEniUvMgNvm6bzFuh8uOr7RiL+MfKDryZohw
sha512-g7BkZDwJ40r7W6wRgxiMl24xwlapg2sexOvKRCRECwXdMmkAupaZwDDJPaoIWvDP68IjL5j0SFzXK31AvqILbA==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-PageHeader-Collapsible.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1161 Bytes

local SRI possible, possible hash-values:

sha256-cOyObh/AltGaUwh7rRCN2F/ntM9tyIFt6FTKCJc+xzc=
sha384-ThiuRfqFA7PdayrHVriSae9N2XFHpxrsf6SDvKRbZdItH3b2NjNCyhowE6OG8GzG
sha512-dD/SERREfBGkKAgNSVlqoLIq2PyNH3OVAG03LnxESOE1jjcnhhnCCgUUe+46OBn2HAFAR/DmKfk3GeyAZOKDrg==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/OpenGemeentenSite-Viewport.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

268 Bytes

local SRI possible, possible hash-values:

sha256-p0UdgKn+t8HF8h9lDl6Nj6emHJb6azoL1XuSoqMSEUc=
sha384-K6FtTnjhKVqEhBSR1PzOeQ+QUjtl6NHZnUZuta9SXMVWfscwakSNAAa9KL0UW25D
sha512-Gc7WzBGtuRVcLdQtuH2ag5ENbp9NZzDNJ6EA17He1IHeMRxIUWT7EecMqaEeCyAQTIboygfMcr0Bod7sMiEtAQ==

script

src

/typo3conf/ext/opengemeenten_site/Resources/Public/Js/Vendor/Polyfills/scrollbehavior.min.js?1675774504

200

defer attribute found

application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 3546 Bytes

local SRI possible, possible hash-values:

sha256-wVwwqJzwJKpt1IEq7pSuQZjrof6vZZ0mfmyqIIEp1a0=
sha384-Q1Pk4UhhIYoqnu/bKdA5C9UPSaoTXkPapg8cCdk8OwIVXiNFY4xD3o/ctq1xJFWK
sha512-2MItly/+WLFPxe8BXm6aAtVifiprc86dTIfUYMyjjg438djQHeacUTQPPmTK5LxjOjOOEoM6rrue1U/p7fUTDg==

2a03:38a0:60:91::1

#main

#page-footer

#page-header__menu

#page-header__search__input

/aanvragen-en-regelen

/aanvragen-en-regelen/gebruik-achternaam-veranderen

/aanvragen-en-regelen/onze-trouwambtenaren-bekijken

/aanvragen-en-regelen/paspoort-of-identiteitskaart-verlengen

/aanvragen-en-regelen/praktische-zaken-bij-volledige-trouwceremonie-in-het-gemeentehuis

/aanvragen-en-regelen/rijbewijs-aanvragen-en-ophalen

/aanvragen-en-regelen/trouwen-en-geregistreerd-partnerschap-regelen

/aanvragen-en-regelen/trouwlocatie-gemeentehuis-of-ergens-anders

/aanvragen-en-regelen/verhuizing-in-en-naar-veenendaal-doorgeven

/algemeen/over-toegankelijkheid-en-webarchief

/algemeen/sitemap

/belasting-en-vergunningen

/belasting-en-vergunningen/afvalstoffenheffing

/belasting-en-vergunningen/bestemmingsplannen

/belasting-en-vergunningen/bezoekersapp-voor-parkeren

/belasting-en-vergunningen/exploitatievergunning-voor-horeca

/belasting-en-vergunningen/omgevingsvergunning-aanvragen

/belasting-en-vergunningen/ontheffing-gebruik-openbare-weg

/belasting-en-vergunningen/parkeervergunning-centrum

/info-over-de-gemeente

/info-over-de-gemeente/bouwprojecten

/info-over-de-gemeente/contact-ondernemers

/info-over-de-gemeente/gemeenteraad

/info-over-de-gemeente/inkoop-en-aanbesteding

/info-over-de-gemeente/parkeergarages-en-terreinen

/info-over-de-gemeente/samenstelling-college/burgemeester-gert-jan-kats

/info-over-de-gemeente/samenstelling-college/wethouder-dylan-lochtenberg

/info-over-de-gemeente/samenstelling-college/wethouder-engbert-stroobosscher

/info-over-de-gemeente/samenstelling-college/wethouder-marco-verloop

/info-over-de-gemeente/samenstelling-college/wethouder-martijn-beek

/info-over-de-gemeente/samenwerken-in-ict-campus

/info-over-de-gemeente/service-en-contact

/info-over-de-gemeente/vacatures

/info-over-de-gemeente/verkiezingen-provinciale-staten-en-waterschappen-2023

/info-over-de-gemeente/werkzaamheden-in-veenendaal

/info-over-de-gemeente/winkelstad-veenendaal

/ondersteuning-zorg-en-inkomen

/ondersteuning-zorg-en-inkomen/energietoeslag

/ondersteuning-zorg-en-inkomen/gehandicaptenparkeerkaart

/ondersteuning-zorg-en-inkomen/gehandicaptenparkeerplaats

/ondersteuning-zorg-en-inkomen/uitbetaaldagen-uitkering

/ondersteuning-zorg-en-inkomen/uitkering-aanvragen

/ondersteuning-zorg-en-inkomen/uitkeringen-zelfstandigen

/ondersteuning-zorg-en-inkomen/verblijf-buitenland-melden

/ondersteuning-zorg-en-inkomen/verplichtingen-bij-een-uitkering

/praat-en-doe-mee

/praat-en-doe-mee/meldingen-en-vragen

https://app-eu.readspeaker.com/cgi-bin/rsent?customerid=12916&lang=nl_nl&readid=content&url=https://www.veenendaal.nl/

https://boveenendaal.nl/

https://duurzaamveenendaal.nl/default.aspx

https://sociaalstartpuntveenendaal.nl/is/een-vraag-over-2/werk-geld-en-uitkering/geldzaken

https://twitter.com/gemveenendaal

https://veenendaal.raadsinformatie.nl/

https://veenendaal.raadsinformatie.nl/leden

https://www.acv-groep.nl/veenendaal/afvalbrengstation

https://www.facebook.com/gemeenteveenendaal

https://www.instagram.com/gemveenendaal

https://www.linkedin.com/company/gemeente-veenendaal

https://www.verbeterjewijk.nl/

form

get

/algemeen/zoeken

200

text/html; charset=utf-8
X-Content-Type-Options nosniff found

5939 Bytes

iframe

src

https://www.googletagmanager.com/ns.html?id=GTM-MT3XJ78

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-114x114.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-120x120.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-144x144.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-152x152.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-57x57.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-60x60.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-72x72.png

link

apple-touch-icon apple-touch-icon-precomposed

/fileadmin/website_assets/Favicon/apple-touch-icon-76x76.png

link

canonical

https://www.veenendaal.nl/

link

icon

/fileadmin/website_assets/Favicon/favicon-128.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 12614 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-16x16.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 657 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-196x196.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 34822 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-32x32.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 1520 Bytes

link

icon

/fileadmin/website_assets/Favicon/favicon-96x96.png

200

image/png
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 9328 Bytes

link

shortcut icon

/fileadmin/website_assets/Favicon/favicon.ico

200

image/x-icon
missing X-Content-Type-Options nosniff

Cache-Control: public - max-age missing.

No Compression - 34494 Bytes

link

stylesheet

/typo3temp/assets/compressed/merged-0377c1ae00fdcb3523719dcd6f3c1362.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

99 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-0733fa9ab8923ce43b361d785313b45b.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 499 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-140aebc8386bebfec695c2841f752bd3.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 2605 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-1f136c630d98c8e070df5f3fe6b7ac54.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1894 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-27294a227b67ae7646a65c909456c977.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 987 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-3fd48fb943fa6b4fbb0ed5abc1410771.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 469 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-418262c0342ef4cad57343a8e8279d4d.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 409 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-54d6f9a3fee16a18d7665df649a14aa6.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

116 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-595de22e9c3cbfc8b1f4ba1b94b2944a.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 758 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-59dfb49a47ba59a59e900f8420897f32.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

337 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-84d93c122eefd27f8887f89bfcfafa24.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 1910 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-8b30207d77aca186e14432d7677cbfde.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 3690 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-8f1b0ddaf4bef4d4dd102b5bdd11570f.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 459 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-96cc88a9431a5e5c27256249f2ea150e.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 402 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-9c990e659b7b9b8a38d9812b5db776ee.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 828 Bytes

local SRI possible, possible hash-values:

link

stylesheet

/typo3temp/assets/compressed/merged-9d1aa03580e9db58729ead0230b09966.css?1675774605

200

text/css
missing X-Content-Type-Options nosniff

Cache-Control: max-age=315360000,public - with long duration found.

Compression required: 5657 Bytes

local SRI possible, possible hash-values:

Content loaded via url("...")

data:image/png;base64,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	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='120' height='158' fill='%23e4e7e4'%3E%3Cpath fill-rule='evenodd' d='M48.4 74.3h45.4c0-27.8-8-53.2-22.8-74.3H0v158l48.4-83.7z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='120' height='158' fill='%23fff'%3E%3Cpath fill-rule='evenodd' d='M48.4 74.3h45.4c0-27.8-8-53.2-22.8-74.3H0v158l48.4-83.7z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='166' height='143' fill='%23f9af23'%3E%3Cpath fill-rule='evenodd' d='M0 0h166c0 60.7-30.1 112.6-83 143L0 0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23007bb0' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23666666' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23de3421' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23edefed' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='176' height='360'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23fff' d='M128.8 72H12c0 121.9 59.5 226.1 164 288H0V0h170l-41.2 72z'/%3E%3Cpath fill='%23f9af23' d='M102 208H0a99 99 0 0 0 51 88l51-88z'/%3E%3Cpath fill='%23de3421' d='M157 54l-27-15 27-16v31z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='220' height='400'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cpath fill='%23edefed' d='M52.9 80h129.8c0 135.4-66.1 251.2-182.3 320h219.4V0H7l46 80z'/%3E%3Cpath fill='%23f9af23' d='M82.7 231.1H196a110 110 0 0 1-56.7 97.8L82.7 231z'/%3E%3Cpath fill='%23de3421' d='M21.6 60l30-16.7-30-17.7V60z'/%3E%3C/g%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='184'%3E%3Cpath fill='%23fff' fill-rule='evenodd' d='M0 112l24 72H0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' fill='%23fff'%3E%3Cpath d='M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='32' height='33' fill='%23e03522'%3E%3Cpath d='M23.53 30.6L0 10.15 29.48 0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='32' height='33' fill='%23f9af23'%3E%3Cpath d='M23.53 30.6L0 10.15 29.48 0z'/%3E%3C/svg%3E	2

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='51' height='229' fill='%23007cba'%3E%3Cpath fill-rule='evenodd' d='M0 0h5c-.2 75.7 15.3 152 46 224v5H0V0z'/%3E%3C/svg%3E	1

data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='63' height='197' fill='%23007cba'%3E%3Cpath fill-rule='evenodd' d='M0 0h30a576.2 576.2 0 0 0 33 192v5H0V0z'/%3E%3C/svg%3E	1